./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor630261845 <...> Warning: Permanently added '10.128.0.172' (ECDSA) to the list of known hosts. execve("./syz-executor630261845", ["./syz-executor630261845"], 0x7ffffb0b7fe0 /* 10 vars */) = 0 brk(NULL) = 0x55555562d000 brk(0x55555562dc40) = 0x55555562dc40 arch_prctl(ARCH_SET_FS, 0x55555562d300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor630261845", 4096) = 27 brk(0x55555564ec40) = 0x55555564ec40 brk(0x55555564f000) = 0x55555564f000 mprotect(0x7f5bf1ba4000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 recvfrom(4, [{nlmsg_len=2376, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3615}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x22\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x37\x01\x00\x00\x74\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2376 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3615}, {error=0, msg={nlmsg_len=32, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 close(4) = 0 ioctl(3, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=9}) = 0 syzkaller login: [ 49.763843][ T3615] INFO: trying to register non-static key. [ 49.769660][ T3615] The code is fine but needs lockdep annotation, or maybe [ 49.776751][ T3615] you didn't initialize this object before use? [ 49.783050][ T3615] turning off the locking correctness validator. [ 49.789440][ T3615] CPU: 0 PID: 3615 Comm: syz-executor630 Not tainted 5.19.0-rc5-syzkaller-00263-gb11e5f6a3a5c #0 [ 49.799919][ T3615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 49.809965][ T3615] Call Trace: [ 49.813231][ T3615] [ 49.817416][ T3615] dump_stack_lvl+0xcd/0x134 [ 49.822011][ T3615] register_lock_class+0xf30/0x1130 [ 49.827214][ T3615] ? __lock_acquire+0x2581/0x5660 [ 49.832261][ T3615] ? is_dynamic_key.part.0+0x130/0x130 [ 49.837750][ T3615] ? mark_held_locks+0x9f/0xe0 [ 49.842533][ T3615] __lock_acquire+0x10a/0x5660 [ 49.847307][ T3615] ? lockdep_hardirqs_on+0x79/0x100 [ 49.852511][ T3615] ? find_held_lock+0x2d/0x110 [ 49.857280][ T3615] ? debug_stats_show+0x230/0x230 [ 49.862311][ T3615] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 49.868300][ T3615] ? debug_object_free+0x1c0/0x350 [ 49.873423][ T3615] lock_acquire+0x1ab/0x570 [ 49.877931][ T3615] ? ieee80211_do_stop+0xc3/0x1ff0 [ 49.883046][ T3615] ? lock_release+0x780/0x780 [ 49.887732][ T3615] ? synchronize_rcu_expedited+0x4df/0x610 [ 49.893541][ T3615] ? wait_rcu_exp_gp+0x40/0x40 [ 49.898307][ T3615] ? find_held_lock+0x2d/0x110 [ 49.903081][ T3615] ? prepare_to_wait_exclusive+0x2b0/0x2b0 [ 49.909066][ T3615] _raw_spin_lock_bh+0x2f/0x40 [ 49.913833][ T3615] ? ieee80211_do_stop+0xc3/0x1ff0 [ 49.918954][ T3615] ieee80211_do_stop+0xc3/0x1ff0 [ 49.923895][ T3615] ? mac802154_set_params+0x60/0xa0 [ 49.929091][ T3615] ? lockdep_hardirqs_on+0x79/0x100 [ 49.934292][ T3615] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 49.940109][ T3615] ? ieee80211_adjust_monitor_flags+0x230/0x230 [ 49.946356][ T3615] ieee80211_if_change_type+0x383/0x840 [ 49.951906][ T3615] ieee80211_change_iface+0x57/0x3f0 [ 49.957193][ T3615] cfg80211_change_iface+0x5e1/0xf10 [ 49.962482][ T3615] nl80211_set_interface+0x64f/0x8c0 [ 49.967772][ T3615] ? nl80211_notify_iface+0x180/0x180 [ 49.973149][ T3615] ? nl80211_pre_doit+0x100/0x600 [ 49.978180][ T3615] genl_family_rcv_msg_doit+0x228/0x320 [ 49.983732][ T3615] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 49.991112][ T3615] ? ns_capable+0xd9/0x100 [ 49.995528][ T3615] genl_rcv_msg+0x328/0x580 [ 50.000035][ T3615] ? genl_get_cmd+0x480/0x480 [ 50.004715][ T3615] ? nl80211_notify_iface+0x180/0x180 [ 50.010091][ T3615] ? lock_release+0x780/0x780 [ 50.014776][ T3615] netlink_rcv_skb+0x153/0x420 [ 50.019549][ T3615] ? genl_get_cmd+0x480/0x480 [ 50.024228][ T3615] ? netlink_ack+0xa80/0xa80 [ 50.028996][ T3615] ? netlink_deliver_tap+0x1b1/0xc40 [ 50.034279][ T3615] genl_rcv+0x24/0x40 [ 50.038263][ T3615] netlink_unicast+0x543/0x7f0 [ 50.043038][ T3615] ? netlink_attachskb+0x880/0x880 [ 50.048148][ T3615] ? __virt_addr_valid+0x5d/0x2d0 [ 50.053179][ T3615] ? __phys_addr_symbol+0x2c/0x70 [ 50.058206][ T3615] ? __check_object_size+0x2de/0x700 [ 50.063489][ T3615] netlink_sendmsg+0x917/0xe10 [ 50.068252][ T3615] ? netlink_unicast+0x7f0/0x7f0 [ 50.073195][ T3615] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 50.078482][ T3615] ? netlink_unicast+0x7f0/0x7f0 [ 50.083429][ T3615] sock_sendmsg+0xcf/0x120 [ 50.087848][ T3615] ____sys_sendmsg+0x6eb/0x810 [ 50.092606][ T3615] ? kernel_sendmsg+0x50/0x50 [ 50.097284][ T3615] ? do_recvmmsg+0x6d0/0x6d0 [ 50.101873][ T3615] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 50.107861][ T3615] ? lockdep_hardirqs_on+0x79/0x100 [ 50.113061][ T3615] ___sys_sendmsg+0xf3/0x170 [ 50.117654][ T3615] ? sendmsg_copy_msghdr+0x160/0x160 [ 50.122941][ T3615] ? lock_release+0x780/0x780 [ 50.127618][ T3615] ? ptrace_stop.part.0+0x5ec/0xa80 [ 50.132823][ T3615] ? do_raw_spin_lock+0x120/0x2a0 [ 50.137846][ T3615] ? rwlock_bug.part.0+0x90/0x90 [ 50.142780][ T3615] ? _raw_spin_lock_irq+0x41/0x50 [ 50.147819][ T3615] ? __fget_light+0x20a/0x270 [ 50.152502][ T3615] __x64_sys_sendmsg+0x132/0x220 [ 50.157442][ T3615] ? __sys_sendmsg+0x1b0/0x1b0 [ 50.162206][ T3615] ? _raw_spin_unlock_irq+0x2a/0x40 [ 50.167404][ T3615] ? ptrace_notify+0xfa/0x140 [ 50.172082][ T3615] do_syscall_64+0x35/0xb0 [ 50.176499][ T3615] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 50.182479][ T3615] RIP: 0033:0x7f5bf1b37b89 [ 50.186893][ T3615] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 50.206502][ T3615] RSP: 002b:00007ffd682b8a38 EFLAGS: 00000246 ORIG_RAX: 000000000000002e sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x22\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x08\x00\x03\x00\x09\x00\x00\x00\x08\x00\x05\x00\x08\x00\x00\x00", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_PROBE|MSG_MORE|MSG_BATCH}, 0) = 36 exit_group(0) = ? +++ exited with 0 +++ [ 50.21